GDPR Policy

Effective Date: July 1, 2025

1. Who We Are

For purposes of the EU General Data Protection Regulation (“GDPR”), the data controller is Julie Johnson, doing business as Julie’s Dish, 155 N 1st Ave, Hillsboro, OR 97124, USA.
Email: privacy@juliesdish.com


2. Scope of This Notice

This GDPR Privacy Notice applies to personal data collected from visitors located in the European Economic Area (“EEA”), the United Kingdom (“UK”), and Switzerland when they access juliesdish.com (“Site”) or interact with our services (e.g., subscribing to our newsletter, leaving comments, purchasing digital products).


3. What Personal Data We Collect

CategoryExamplesLawful Basis*
Identity & ContactName, email address, postal address (if voluntarily provided)Consent; Contract
TechnicalIP address, browser type, operating system, referring URLs, time-zone settingsLegitimate Interest (Site security & analytics)
UsagePages viewed, links clicked, time spent, search termsLegitimate Interest (optimise content)
Marketing PreferencesNewsletter opt-in status, cookie consent choicesConsent
TransactionIf we sell e-books or premium content: billing name, email, country (processed via Stripe/PayPal—no payment card data stored on our servers)Contract; Legal Obligation

*“Lawful basis” refers to the legal grounds under GDPR Article 6 on which we rely to process data.


4. How & Why We Use Your Data

  • To send newsletters or recipe updates (with your explicit consent)

  • To respond to comments or inquiries you submit (contractual necessity or consent)

  • To analyse traffic & improve the Site through aggregated analytics (legitimate interest)

  • To comply with legal obligations such as tax or accounting rules

  • To enforce our Terms of Use and protect against fraud or abuse

We do not use personal data for automated decision-making or profiling that produces legal effects.


5. Cookies & Similar Technologies

See our separate Cookie Policy for detailed information. You may withdraw cookie consent at any time via the banner’s “Manage Preferences” link.


6. Sharing & International Transfers

We share data only with trusted processors who help us operate the Site, subject to confidentiality agreements:

ProcessorPurposeSafeguard for EU Transfers
Google LLCAnalytics, email (Gmail)Standard Contractual Clauses (SCCs)
ConvertKitEmail marketingSCCs
Cloudflare, Inc.Content delivery & securitySCCs
Stripe/PayPalPayment processing (if applicable)SCCs & PCI-DSS compliance

Data may be stored on servers in the United States. Where required, we rely on SCCs or other approved mechanisms (GDPR Art. 46) to ensure an adequate level of protection.


7. Data Retention

We retain personal data only as long as necessary:

  • Newsletter list – until you unsubscribe or your address hard-bounces.

  • Comments – for the life of the post, unless you request deletion.

  • Analytics logs – 26 months (Google Analytics default) then deleted.

  • Transaction records – 7 years for tax compliance.


8. Your GDPR Rights

If you are in the EEA/UK/Switzerland, you may exercise these rights (subject to verification):

  1. Access – Obtain a copy of the data we hold about you.

  2. Rectification – Correct inaccurate or incomplete data.

  3. Erasure (“Right to be Forgotten”) – Request deletion of your data.

  4. Restriction – Limit processing of your data.

  5. Portability – Receive data in a structured, machine-readable format.

  6. Objection – Object to processing based on legitimate interests or direct marketing.

  7. Withdraw Consent – At any time, without affecting prior lawful processing.

We will respond within 30 days of receiving your request at privacy@juliesdish.com.


9. Data Security

We employ TLS encryption, strong password policies, routine software updates, web-application firewalls, and least-privilege access controls to safeguard personal data.


10. Children’s Data

Our content is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us to delete it promptly.


11. Complaints

You have the right to lodge a complaint with your local supervisory authority, or you may contact us first so we can address your concerns.


12. Updates to This Notice

We may update this GDPR Privacy Notice periodically. The “Effective Date” will change, and significant changes will be highlighted on the Site. Continued use after changes signifies acceptance.


13. Contact

Data Controller: Julie Johnson
Email: privacy@juliesdish.com
Mail: 155 N 1st Ave, Hillsboro, OR 97124, USA